CVE-2026-23154

MEDIUM EPSS 1.8%
Published Feb 14, 20264mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 14, 2026 4mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issues observed when a station accesses IPv4 servers via hotspots with an IPv6-only upstream interface. Specifically, it fixes a bug in GSO segmentation when forwarding GRO packets containing a frag_list. The function skb_segment_list cannot correctly process GRO skbs that have been converted by XLAT, since XLAT only translates the header of the head skb. Consequently, skbs in the frag_list may remain untranslated, resulting in protocol inconsistencies and reduced throughput. To address this, the patch explicitly sets the SKB_GSO_DODGY flag for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers (bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO packets as potentially modified after protocol translation. As a result, GSO segmentation will avoid using skb_segment_list and instead falls back to skb_segment for packets with the SKB_GSO_DODGY flag. This ensures that only safe and fully translated frag_list packets are processed by skb_segment_list, resolving protocol inconsistencies and improving throughput when forwarding GRO packets converted by XLAT.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥5.6  –  <6.12.69
linuxlinux_kernel*≥6.13  –  <6.18.9
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/2cbef9ea5a0ac51863ede35c45f26931a85d3888
  • git.kernel.org https://git.kernel.org/stable/c/3d48d59235c494d34e32052f768393111c0806ef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3e62db1e3140449608975e29e0979cc5f3b1cc07
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/426ca15c7f6cb6562a081341ca88893a50c59fa2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9122d7280b2303e835cdfec156bd932ac1f586ed

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/3d48d59235c494d34e32052f768393111c0806ef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3e62db1e3140449608975e29e0979cc5f3b1cc07
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/426ca15c7f6cb6562a081341ca88893a50c59fa2
    Patch